Serial No.: 10/776,407 
AMENDMENTS TO THE CLAIMS 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

1 . (Currently Amended) A method for obtaining an approval of an electronic 
fund transfer disbursement file from a us e r of a remote system and transferring the 
electronic fund transfer disbursement file to a payments processor, the method 
comprising: 

generating a digest of the electronic fund transfer disbursement file by 
performing a hash on the electronic fund transfer disbursement file; 
transferring the digest to the remote system; 
transferring authorization control code to the remote system, the 
authorization control code dr i v i ng the r e mot e syst e m being executed by the remote 
system to return an authorization response message of a predetermined data 
structure by performing p e rform the following steps: 

generating additional message attributes: 
obtaining e btaif^-a digital signature of authenticated attributes by 
passing the authenticated attributes to a file authentication component of the 
remote system as part of a digital signature reguest message , the authenticated 
attributes including the digest and the additional message attributes ; 
generating a dummy data string; 

obtaining a dummy g e n e rat e an authorization response message with 
the predetermined data structure bypassing the dummy data string to the file 
authentication component of the remote system as part of an authorization 
response reguest message , the dummy authorization response including a digest 
of the dummy data string; a digital signature of the digest of the dummy data string, 
and a digital certificate corresponding to the digital signature; 

generating the authorization response message from the dummy 
authorization response message by making the following replacements: i) replacing 
the digest of the dummy data string with the digest of the electronic fund transfer 
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disbursement file; and ii) replacing the digital signature of the digest of the dummy 
data string with the digital signature of the digest of the electronic fund transfer 
disbursement file: 

receiving the authorization response message f rom the remote system; and 
transferring an electronic funds submission to the payments processor, the 
electronic funds submission comprising the paym e nt transaction electronic fund 
transfer disbursement file and the authorization response message, at le ast a 
port i on of the author i zat i on r e spons e comprising th e d i gital signatur e. 

2. (Canceled) 

3. (Canceled) 

4. (Canceled) 

5. (Currently Amended) The method of claim 1: 4f 

further comprising authenticating a_the-user of the remote system by: 

obtaining logon credentials identifying the user of the remote system; 
determining whether the logon credentials match those of an 
authorized user; and 

the step of transferring the authorization control code r e gu e st to the remote 
system occurs only if the logon credentials match those of an authorized user. 

6. (Original) The method of claim 5, further comprising authenticating the user 
of the remote system to the payments processor by: 

receiving an authentication challenge from the payments processor; 
transferring the authentication challenge to the remote system; 
receiving an authentication response from the remote system; and 
transferring the authentication response to the payments processor. 
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7. (Currently Amended) A method for obtaining an approval of an electronic 
fund transfer disbursement file from a us e r of a remote system and transferring the 
electronic fund transfer disbursement file to a payments processor, the method 
comprising: 

generating a digest of the electronic fund transfer disbursement file by 
performing a hash on the electronic fund transfer disbursement file; 
transferring the digest to the remote system; 

receiving an authorization response message from the remote system, the 
authorization response message being of a predetermined data structure and 
being generated by the remote system performing the following steps: 
generating additional message attributes: 

generating a digital signature of authenticated attributes, the 
authenticated attributes including the digest and the additional message attributes; 
generating a dummy data string: 

generating a dummy authorization response message with the 
predetermined data structure, the dummy authorization response message 
including a digest of the dummy data string; a digital signature of the digest of the 
dummy data string, and a digital certificate corresponding to the digital signature; 

generating the authorization response message from the dummy 
authorization response message by making the following replacements: i) replacing 
the digest of the dummy data string with the digest of the electronic fund transfer 
disbursement file: and ii) replacing the digital signature of the digest of the dummy 
data string with the digital signature of the digest of the electronic fund transfer 
disbursement file; and 

r e c ei v i ng an authorizat i on r e spons e from th e r e mot e syst e m, th e 
authorizat i on r e spons e compr i s i ng a dig i ta l s i gnature of auth e nt i cat e d attributes, 
th e auth e nt i cat e d attr i but e s i ncluding th e d i g e st; 

transferring an electronic funds submission to the payments processor over 
a secure connection, the electronic funds submission comprising the paym e nt 
transaction electronic funds transfer disbursement file and the authorization 
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response message, at le ast a port i on of th e author i zat i on r e spons e compr i sing the 
d i g i ta l s i gnatur e . 

8. (Currently Amended) The method of claim 7 wherein: 

generating the digital signature of the authenticated attributes comprises 
passing the authenticated attributes to a digital signature hardware key as part of a 
digital signature reguest message and receiving, in response, the digital signature 
of the authenticated attributes; and 

generating the dummy authorization response message comprises passing 
the dummy data string to a digital signature hardware key as part of an 
authorization response reguest message and receiving, in response, the dummy 
authorization response message in the predetermined data structure. ^ 
author i zation contro l code furth e r prov i d e s for th e remot e syst e m to: 
g e n e rat e addit i ona l message attribut e s; and 

comb i n e th e add i tiona l m e ssag e attr i but e s w i th th e dig e st to gen e rat e 

th e auth e nticat e d attribut e s; and 

th e d i gita l s i gnatur e compr i s e s a d i gital signature of a hash of th e 

auth e nt i cat e d attribut e s. 

9. (Canceled) 

10. (Canceled) 

1 1 . (Currently Amended) The method of claim 8^4^further comprising: 
authenticating the user of the remote system by: 

obtaining logon credentials identifying the user of the remote system; 
determining whether the logon credentials match those of an authorized 
user; and 

the step of transferring the authorization request to the remote system 
occurs only if the logon credentials match those of an authorized user. 



5 



Serial No.: 10/776,407 



12. (Original) The method of claim 1 1 , further comprising authenticating the user 
of the remote system to the payments processor by: 

receiving an authentication challenge from the payments processor; 

transferring the authentication challenge to the remote system; 

receiving an authentication response from the remote system; and 

transferring the authentication response to the payments processor. 

Claims 13-18 (Canceled) 
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